| Package | Affected versions | Patched versions |
|---|---|---|
| phpipam | ≤ 1.7.3 |
phpIPAM v1.7.3 contains a Cross-Site Request Forgery (CSRF) vulnerability in the database export functionality. The generate-mysql.php function, located in the /app/admin/import-export/ endpoint, allows remote attackers to trigger large database dump downloads via crafted HTTP GET requests if an administrator has an active session.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free